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(57) Abstract: 

PROBLEM TO BE SOLVED: To automatically prevent a 
reception-side device from being infected with a 
computer virus through data communication between 
computers by making a computer virus check on 
communication data and informing the reception-side 
device that a computer virus has been detected in such a 
case. 

SOLUTION: When a transmission-side device 1 sends 
communication data 10 to the reception-side device 2, 
the computer virus reception monitor device 5 receives 
it through a receiving process means 6 before the 
reception-side device 2 receives the communication data 
10. The communication data 10 taken in by the computer 
virus reception monitor device 5 are checked by a 
receive data check process means 7 as to a computer 
virus. If the communication data 10 are infected with a 
computer virus and illegal, a receive data check process 
means 7 discards the communication data 10 and informs 
the reception-side device 2 that the infected illegal 
data has been sent. 
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[0011] 

[Embodiments] Next, an embodiment of the present invention 
will be described with reference to the drawings. The most 
preferable embodiment of the present invention will be 
described with reference to Fig. 1. Namely, a computer virus 
reception monitoring device 5 is interposed between a 
transmitting-side device 1 and a receiving-side device 2 that 
receives communication data 10 from the transmitting-side 
device 1. The computer virus reception monitoring device 5 
includes a receiving means 6 that receives the communication 
data 10 sent from the transmitting-side device 1. Moreover, 
the computer virus reception monitoring device 5 includes a 
received data checking means 7 that checks if the 
communication data 10 is infected with a computer virus. The 
transmitting means 8 transmits the communication data 10 to 
the receiving-side device 2. If the computer virus check 
reveals that the received communication data 10 has been 
infected with a computer virus, a communicating-with- 
receiving-side device means 9 notifies the receiving-side 
device 2 that communication data infected with a computer 
virus has been received. 

[0012] Next, the actions to be performed according to the 
present embodiment will be described with reference to the 
block diagram of Fig. 1 and the flowchart of Fig. 2. When 
the transmitting-side device 1 transmits communication data 
10 to the receiving-side device 2, and before the receiving- 
side device 2 receives the communication data 10, the 
receiving means 6 included in the computer virus reception 
monitoring device 5 receives the communication data 10 (step 
SI). The received data checking means 7 checks if the 
communication data 10 fetched into the computer virus 
reception monitoring device 5 is infected with a computer 
virus (step S2 ) . If the result of the check demonstrates 
that infection of the communication data 10 with a computer 
virus is not recognized, the transmitting means 8 included in 
the computer virus reception monitoring device 5 transmits 
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the communication data 10 to the receiving- side device 2 that 
includes the receiving means 4 (step S3). Consequently , the 
receiving's ide device 2 receives the communication data 10 as 
normal data uninfected with a computer virus. As the 
receiving-side device 2 need not care about whether the 
received data 10 is infected with a computer virus, the 
receiving-side device 2 can access the data without 
performing a virus check. If the communication data 10 is 
infected with a computer virus and is regarded as illegal 
data, the received data checking means included in the 
computer virus reception monitoring device 5 discards the 
communication data 10 ( step S4 ) . The communicating-with- 
receiving-side device means 9 notifies the receiving-side 
device 2 that illegal data contaminated with a computer virus 
has arrived (step S5). If the communication data 10 is 
illegal data contaminated with a computer virus, the 
communicating-with-receiving-side device means 9 included in 
the computer virus reception monitoring device 5 notifies the 
receiving-side device of the fact. A simple communication 
error can therefore be readily discriminated. When the 
receiving- side device 2 receives the notification, the 
receiving- side device 2 receives no communication data . 
[0013] According to the present embodiment, the 
transmitting-side device 1 and receiving-side device 2 are 
dedicated to transmission or reception . Transmitter- 
receivers having the capabilities of both the transmitting- 
side device 1 and receiving-side device 2 are generally 
adopted as the devices. 

[0014] Moreover, the receiving-side device employed in the 
present embodiment may be adopted as a server on a network on 
which personal computers communicate with one another. 
[0015] 

[Examples] Next, an example of the present invention will be 
described with reference to the drawings. 

[0016] Fig. 3 is a block diagram showing an example of the 
computer virus reception monitoring device 5 and its 
peripherals . The transmitting-side device 1 shown in Fig . 1 
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transmits data to the receiving-side device 2 shown therein 
over a computer network 301. A control unit 305 is formed 
with an MPU or the like in order to control each of the 
receiving means 6, received data checking means 7, 
transmitting means 8, and communicating-with-receiving-side 
device means 9. A control instruction sent from the control 
unit 305 is stored in a control instruction memory 303. The 
control instruction memory 303 is formed with a read-only 
memory (ROM) in an effort to remove the adverse effect of a 
computer virus. A working memory 304 is used to temporarily 
store communication data 10 received from the computer 
network 301, and formed with a random access memory (RAM). 
Data patterns of known computer viruses are stored in an 
illegal data pattern memory 302 that is formed with a 
programmable read-only memory (PROM) in consideration of the 
possibility that other data pattern may be added. The 
illegal data pattern memory 302 is used as the received data 
checking means 7 shown in Fig. 1. Moreover, the working 
memory 304 is utilized at the time of using the receiving 
means 6, transmitting means 8, and communicating-with- 
receiving-side device means 9. 

[0017] Next, actions to be performed in the present example 
will be described with reference to the block diagram of Fig. 
3 and the flowchart of Fig. 2. The transmitting-side device 
1 transmits communication data 10 to the receiving-side 
device 2 over the computer network 301. Before the 
receiving-side device 2 receives the communication data 10, 
the control unit 305 executes a data reception instruction 
that is stored in the control instruction memory 303. Every 
time the instruction is executed, the computer virus 
reception monitoring device 5 stores the communication data 
10 in the working memory 304 (step SI). In response to a 
instruction stored in the control instruction memory 303, the 
control unit 305 compares the communication data 10 stored in 
the working memory 304 with the illegal data patterns stored 
in the illegal data pattern memory 303 (step S2 ) . If the 
result of the comparison demonstrates that no data pattern 



- 3 - 



identical to any of the illegal data patterns is detected in 
the communication data 10 , the control unit 305 judges that 
the communication data 10 is not infected with a computer 
virus. The control unit 305 then executes an instruction 
that the communication data 10 should be handed to the 
receiving-side device 2 which is stored in the control 
instruction memory 303, and transmits the communication data 
10 accordingly (step S3). If a data pattern identical to any 
of the illegal data patterns is detected in the communication 
data 10, it is judged that the communication data 10 has been 
infected with a computer virus. The communication data 10 is 
therefore discarded (step S4). The control unit 305 executes 
an instruction that the main system 2 should be notified 
which is stored in the control instruction memory 303. The 
control unit notifies the receiving-side device 2 that 
illegal data has arrived (step S5). 
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[0018] 

[Advantages] As described above , according to the present 
invention, when communication data is transmitted from a 
transmitting-side device to a receiving-side device, before 
the communication data reaches the receiving-side device, a 
computer virus reception monitoring device receives the data 
and checks the data for a computer virus. Only communication 
data uninfected with a computer virus is transmitted to the 
receiving-side device. Consequently, the receiving-side 
device can be prevented from being infected with a computer 
virus through data communication. Moreover, as the computer 
virus check is automatically performed at the time of data 
reception, the receiving-side device need not check for a 
computer virus after receiving the data. 
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